CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- google androidThe Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 ...7.8 High
- google androidThe MediaTek power-management driver in Android before 2016-06-01 on Android One devices allows...7.8 High
- google androidThe NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain...7.8 High
- google androidThe NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain...7.8 High
- google androidThe Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows...7.8 High
- google androidThe Qualcomm camera driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 (2013)...7.8 High
- emc data domain osEMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores...8.8 High
- redhat openshiftRed Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows...8.8 High
- redhat openshift, openshift origin +1 moreRed Hat Security Advisory: Red Hat OpenShift Enterprise 3.2 security, bug fix, and enhancement update8.8 High
- xen, oracle vm server +1 moreThe libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause...6.7 Medium
- criu checkpoint\/restore in userspace, opensuse +1 moreThe service daemon in CRIU creates log and dump files insecurely, which allows local users to...7.8 High
- emc isilon onefsEMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root...6.7 Medium
- resourcedm intuitive 650 tdb controllerResource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allow remote...8.8 High
- haxx curlMultiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with...7.8 High
- adobe connectUntrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291...7.8 High
- freebsdInteger signedness error in the sockargs function in sys/kern/uipc_syscalls.c in FreeBSD 10.1...7.8 High
- golang goUntrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows...7.8 High
- huawei mobile broadband hl serviceThe Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write...7.8 High
- safemode project safemodesafemode gem allows context-dependent attackers to obtain sensitive information via the inspect method8.1 High
- apple itunesUntrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local...7.8 High
- xen, oracle vm server +1 moreThe guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not...8.4 High
- vmware player, workstation +1 moreVMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly...9.8 Critical
- apache ambariThe agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent...3.3 Low
- jenkins, redhat openshift +1 moreMissing permissions check in Jenkins Core4.3 Medium
- jenkins, redhat openshift +1 moreIncorrect Authorization in Jenkins Core4.3 Medium
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moredxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe RPC NDR Engine in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7...8.8 High
- microsoft windows 10, windows 7, windows 8.1 +3 more +5 moredxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows vista, windows server 2008 +1 moreInternet Information Services (IIS) in Microsoft Windows Vista SP2 and Server 2008 SP2 mishandles...7.8 High
- google androidOpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles updates of the...7.0 High
- google androidOpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles resets of the...7.0 High
- google androidserver/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and...5.5 Medium
- google androidThe MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to...7.0 High
- google android oneThe MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to...7.0 High
- google androidcodecs/amrnb/dec/SoftAMR.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x...7.8 High
- google androidcodecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x...7.8 High
- google androidcodecs/on2/enc/SoftVPXEncoder.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5...7.8 High
- google androidservices/camera/libcameraservice/device3/Camera3Device.cpp in mediaserver in Android 4.x before 4...7.8 High
- google androidmedia/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp in mediaserver in Android 4.x...7.8 High
- google androidThe NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain...7.0 High
- google androidThe NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain...7.0 High
- google androidThe NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain...7.0 High
- google androidThe Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 (2013) devices allows...7.0 High
- google androidThe Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows...7.0 High
- Show moreLoading…